Cybersecurity Business Systems Analyst II GRC

Banner Health; Arnold (MD); Remote; USD 60,000 - 80,000; Full time

Job summary

A leading healthcare organization in Maryland is seeking a Cybersecurity Business Systems Analyst II to protect sensitive patient data and strengthen security in healthcare systems. Responsibilities include delivering cybersecurity objectives, supporting process enhancements, and ensuring policy compliance. Ideal candidates will possess a bachelor's degree and 3+ years of relevant experience, with a strong focus on stakeholder engagement and technical insights.

Qualifications

• 3+ years of experience in a healthcare or related environment.
• Expertise in information technology and healthcare.
• Experience in medium to large scale project planning.

Responsibilities

• Deliver Cybersecurity objectives by designing and implementing practices or systems.
• Support process enhancement and streamline Cybersecurity delivery.
• Generate actionable metrics and represent at an executive level.

Skills

Strong knowledge of business

Cybersecurity

Information Technology

Communication skills

Analytical skills

Problem-solving skills

Education

Bachelor's degree in business, cybersecurity, information technology, or computer science

Certification (CISSP, CISA, etc.) within one year of entering position

Tools

Microsoft Suite

Job description

Overview

Department Name: IT Cybersecurity GRC-Corp

Work Shift: Day

Job Category: Information Technology

Estimated Pay Range: $35.37 - $58.95 / hour, based on location, education, & experience.

In accordance with State Pay Transparency Rules.

Health care is full of possibilities. Information Technology plays a pivotal role in excellent patient care at Banner Health. If you're looking to leverage your abilities – you belong at Banner Health.

Are you passionate about cybersecurity risk, technology, and architecture, and eager to make a meaningful impact in healthcare? Join our team as a Cybersecurity Business Systems Analyst II, where you\'ll play a critical role in protecting sensitive patient data and strengthening the security of our healthcare systems.

In this role, you\'ll work closely with cross-functional teams to assess cybersecurity risk, validate control effectiveness, and ensure policy compliance across complex healthcare technology environments. While not designing systems directly, your strong understanding of cybersecurity architecture and healthcare IT will enable you to evaluate technical implementations, identify potential gaps, and ensure appropriate evidence is in place to support regulatory and security requirements. Your insights will help bridge the gap between technical teams and governance functions, ensuring that risk decisions are informed, accurate, and aligned with both business and compliance objectives.

We\'re looking for candidates with experience in cybersecurity who thrive on building relationships with stakeholders, understanding their operational needs, and applying GRC principles to support secure and compliant business solutions. The ability to interpret technical environments and translate them into meaningful risk assessments and control validations is key to success in this role.

Schedule Generally Monday - Friday 8am - 5pm (occasional weekends)

Remote Work This is a fully remote position and available if you live in the following states only: AK, AR, AZ, CA, CO, FL, GA, IA, ID, IN, KS, KY, MD,MI, MN, MO, MS, NC, ND, NE, NM, NV, NY, OH, OK, OR, PA, SC, TN, TX, UT, VA, WV, WA, WI & WY.

Within Banner Health Corporate, you will have the opportunity to apply your unique experience and expertise in support of a nationally-recognized healthcare leader. We offer stimulating and rewarding careers in a wide array of disciplines. Whether your background is in Human Resources, Finance, Information Technology, Legal, Managed Care Programs or Public Relations, you\'ll find many options for contributing to our award-winning patient care.

Position Summary

This position is responsible for delivering Cybersecurity objectives to plan and designing, developing, and implementing, efficient business, technical, financial, and operational practices or systems in support of core organizational functions and business processes. This includes gathering and analyzing data in support of business cases, proposed projects, and systems requirements. This individual is competent to work at the highest practical understanding of the Essential Functions across the Cybersecurity organization. You will be required to apply proven communication, analytical, technical, and problem-solving skills to help maximize the benefit of Cybersecurity practices and investments. Provides all customers, both internal and external, of Banner Health with excellent service experience by consistently demonstrating our core and leader behaviors each and every day.

CORE FUNCTIONS

1. Support process enhancement and redesign efforts to streamline Cybersecurity delivery. Review and analyze the effectiveness and efficiency of existing systems and processes to develop strategies for improving or further leveraging, consolidating, or decommissioning.
2. Provide insight into scope and parameters of required analysis in order to define outcome criteria and deliver measurable actions as part of daily efforts as well as in projects.
3. Contribute to the determination of key data points from raw data and generate information to create meaningful actionable metrics and represent at an executive level.
4. Support research efforts to make recommendations.
5. Operate in compliance with all federal, state, and local mandated information security laws, rules, and guidelines. Remain current with the latest industry information.
6. Ability to work within procedures with minimal oversight
7. Ability to communicate effectively with leaders at all levels of the organization.
8. Under general direction, this position is responsible for information security across multiple departments system-wide and requires interaction at all levels of staff and management.

MINIMUM QUALIFICATIONS

Must possess strong knowledge of business, cybersecurity, information technology and/or computer science as normally obtained through the completion of a bachelor\'s degree. Certification may be required in at least one of the following areas within one year of entering the position: CISSP, CISA, SSCP, PCI-ISA, CRISC, HCISSP, CompTIA Security+ or other certification designated by the Information Security Leader.

Must possess three years of experience in a healthcare or related environment or an equivalent combination of relevant education, technical, business and healthcare experience. Must demonstrate expertise in information technology and healthcare. Needs experience in medium to large scale project planning and reporting either individually or in a team. Requires communication and presentation skills to engage technical and non-technical audiences. Requires ability to communicate and interact across facilities and at various levels. Ability to balance project workloads with customer support and on-call demands. As is typical in this industry, variable shifts and hours and carrying/responding to a pager may be required.

Demonstrate proficiency with the Microsoft Suite of products and other tools depending on position requirements.

PREFERRED QUALIFICATIONS

Advanced degree may substitute for work experience.

Additional related education and/or experience preferred.

Anticipated Closing Window

2026-01-09

EEO Statement

EEO/Disabled/Veterans

Our organization supports a drug-free work environment.

Privacy Policy

Privacy Policy